Mobile Token Cloud Activation Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for activating mobile terminal tokens lack security interaction between the mobile terminal token and the cloud authentication server, leading to potential vulnerabilities during the activation process.
Innovation Solution
A method involving a cloud authentication management platform and server that generates and verifies a dynamic password through a sequence of requests and responses, including token sequence numbers and seed generating factors, to ensure secure activation of the mobile terminal token.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If direct scanning of two-dimensional code is used for activation, then activation process is simple, but security is low and sensitive information can be obtained directly
Solution Approach 1:
The activation process is divided into multiple distinct phases: first activation request/response (obtaining activation code), second activation request/response (scanning code and obtaining token sequence number), and third activation request/response (generating and verifying dynamic password). This segmentation prevents direct information extraction by breaking the activation into secure, incremental steps where sensitive data is never exposed in a single scan.
Solution Approach 2:
The cloud authentication server acts as an intermediary between the mobile terminal token and the activation system. Instead of the mobile terminal directly accessing or scanning sensitive information, all activation requests and responses are mediated through the cloud server, which verifies credentials and exchanges data securely. This intermediary layer prevents direct scanning of sensitive information while maintaining activation functionality.
2Reliability
If multiple activation requests and responses are implemented, then security interaction is improved, but device complexity increases
Solution Approach 1:
The activation process implements feedback mechanisms where each request receives a structured response containing specific data needed for the next step. The cloud authentication server provides feedback in the form of activation codes, token sequence numbers, and verification results, enabling the mobile terminal to proceed systematically through each activation phase only after receiving appropriate feedback from the previous step.
Solution Approach 2:
The system performs preliminary actions by pre-establishing the activation code retrieval step before the actual token activation. The mobile terminal first obtains the activation code from the cloud server before scanning the two-dimensional code, preparing necessary credentials in advance. This preliminary action simplifies the subsequent activation steps by having required data ready before the main activation process begins.
Data Source
AI summary
A device and method for online activation of a mobile terminal token related to cloud authentication management is disclosed. The method generally includes: a first activation request sent by the cloud authentication management platform, the cloud authentication server generates a first activation response and sends same to the cloud authentication management platform; the cloud authentication management platform sends the first activation response to the terminal; when the mobile terminal token obtains the first activation response, the token accesses the cloud authentication server and establishes a network data link; the mobile terminal token and the cloud authentication server send data and carry out activation.